Is your web application secure? HTTP attacks are real, and dangerous, s If the frameworks we are using may have inherent insecurities, how can patch the holes and lock down a potentially vulnerable application?